Security GRC Engineer

About the Role

Security GRC Engineers design, implement, and scale our governance, risk, and compliance (GRC) program. You'll lead automation of compliance workflows, build self-serve tools to enable GTM teams, and ensure our products and infrastructure meet the highest security standards. This role blends technical implementation with strategic program development, directly shaping how we build trust with customers.

Qualifications

• Experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1.
• Comfortable tracing an external claim back to how the product and infrastructure are actually configured — using coding agents and curiosity to confirm that what we say is what we do, flag issues that affect the security and AI governance program, and drive them to the right outcome.
• Strong cross-functional collaboration skills, especially with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators.

Sample Projects

• Automate evidence gathering and continuous control testing.
• Own the relationship with audit firms and customers — explain the security and AI governance program and earn their trust in it.
• Conduct security compliance reviews for new products, features, and vendors.
• Support Legal in contract negotiations with timely, accurate guidance on security and AI governance terms.
• Support incident response communications — draft and review customer-facing updates during security incidents.
• Build self-serve documentation and tools to answer customer security and AI governance inquiries.
• Maintain corporate security policies.

Interview Process

• 2–3 short technical interviews
• Onsite at our office to work on a small project, discuss ideas, and meet the team